ux-walkthrough
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto orchestrate its internal Python scripts (e.g.,precheck_walkthrough.pycallingdetect_input_mode.pyandscan-pages.py). This is a standard orchestration pattern for multi-script tools. - [COMMAND_EXECUTION]: The skill is designed to identify and optionally execute dev server commands (e.g.,
npm run dev) found in the user-provided project'spackage.jsonto enable URL-based walkthroughs on local development environments. - [DATA_EXPOSURE]: The skill scans the local file system within a directory provided by the user to identify frontend project structures, routing, and components. This access is necessary for its core functionality and is restricted to the input path.
- [EXTERNAL_DOWNLOADS]: The skill's
requirements.txtspecifies standard, well-known dependencies includingpython-docx,Pillow, andocrmac. No unauthorized or suspicious remote code downloads were detected.
Audit Metadata